| 01:48.32 | *** join/#ldstech onlinecop (~OnlineCop@ip98-160-142-155.lv.lv.cox.net) |
| 01:54.54 | *** part/#ldstech onlinecop (~OnlineCop@ip98-160-142-155.lv.lv.cox.net) |
| 02:20.50 | *** join/#ldstech mailman0 (~mailman0@ip72-201-159-66.ph.ph.cox.net) |
| 02:37.24 | *** join/#ldstech josephscott (~josephsco@208.95.152.44) |
| 03:24.01 | josephscott | scgallafent: ping |
| 05:14.09 | *** join/#ldstech drfreeze (~Jim@207.191.114.82) |
| 05:32.10 | scgallafent | josephscott: pong. Saw your email. |
| 05:35.19 | josephscott | scgallafent: any ideas? |
| 05:35.44 | scgallafent | I think I remember the question coming up once before and determining that was really the case. <shudder /> |
| 05:38.32 | scgallafent | It's mitigated by the fact that the LDAP store doesn't provide the value and the compare operation happens on the server, but it still means that the request is traveling in plain text across an (at best) TLS connection. |
| 05:38.53 | scgallafent | You put a lot of trust in your firewall and security software in that situation. |
| 05:44.22 | josephscott | that is pretty much what I was afraid of |
| 05:44.41 | josephscott | they have a whole security team, no one screamed that was insane? |
| 05:45.19 | josephscott | guess I'll be having more fun conversations the next time at the Riverton office :-( |
| 05:45.39 | scgallafent | My guess is that it's whatever the vendor implemented. |
| 05:46.20 | scgallafent | It's got to be a much larger than just the LDAP store, because employee accounts are also involved, which means domain synchronization, etc. |
| 05:47.41 | scgallafent | That's where I suspect there are some vendor issues involved. |
| 05:48.19 | josephscott | this is exactly what I was afraid of when I came across the WSSE a few months back, that it was just the start of the plain text passwords being used |
| 05:49.21 | scgallafent | Yup. |
| 05:50.37 | josephscott | so any employee with access to the LDAP backend will have access to everyones plain text passwords, fun |
| 05:52.05 | scgallafent | I'm assuming that the LDAP passwords are synchronized to other systems (Active Directory, etc.), which could make it a potentially juicy target. |
| 05:52.15 | josephscott | I should write a bot to update my lds account password every 3 hours :-) |
| 05:52.30 | scgallafent | Maybe we could get SecureID tokens. |
| 05:52.51 | josephscott | worries this rabbit hole goes very, very deep |
| 05:53.03 | scgallafent | I sus |
| 05:53.19 | scgallafent | I suspect that it's what came with whichever solution they selected. |
| 05:53.50 | josephscott | yeah, these account backends sync into other things, which makes this worse |
| 05:54.00 | josephscott | yep, that is a pretty lame excuse though |
| 05:54.19 | josephscott | "Oracle told me plain text passwords were okay" doesn't help me sleep at night |
| 05:54.40 | scgallafent | "Nobody ever got fired for buying <insert company here>" |
| 05:56.15 | josephscott | hmmm, I won't be at Riverton for the service day next month (family visiting that weekend), I may just ask Tim and Alan to push on this |
| 05:56.30 | josephscott | one of these days people are going to get tired of hearing from me |
| 05:57.22 | scgallafent | I remember this discussion coming up earlier with the same realization that the passwords were most likely plain text in the back end. I don't remember where things left off except the realization that that is probably the case. |
| 05:59.33 | josephscott | well, I need to get to bed, thanks for the follow up. I'll push on this again |
| 05:59.49 | scgallafent | We're on the phone tomorrow rather than IRC. Want me to bring it up? |
| 06:00.02 | josephscott | sure |
| 06:00.12 | scgallafent | OK. Have a good night. |
| 08:36.46 | *** join/#ldstech Yorokobi (~Yorokobi@pdpc/supporter/professional/yorokobi) |
| 11:35.28 | *** join/#ldstech Yorokobi (~Yorokobi@pdpc/supporter/professional/yorokobi) |
| 14:20.38 | *** join/#ldstech macnewbold (~Adium@76.8.223.101) |
| 14:21.33 | *** join/#ldstech tdeforest (~tdeforest@cpe-74-78-85-69.maine.res.rr.com) |
| 14:21.33 | *** mode/#ldstech [+o tdeforest] by ChanServ |
| 14:23.03 | tdeforest | can anyone tell me how to install Firefox 6.0.2 on Ubuntu? I come from the world of windows/mac so i'm not sure how to do this on Ubuntu. :| |
| 14:24.36 | *** join/#ldstech drfreeze (~Jim@207.191.114.82) |
| 14:30.41 | macnewbold | tdeforest: i think the easy way on ubuntu is a program called "aptitude" if i remember right |
| 14:30.55 | macnewbold | it's a package management front end based on apt |
| 14:31.12 | tdeforest | macnewbold: cool. i'll check that out |
| 14:31.24 | *** join/#ldstech coderjeff (~chatzilla@c-174-52-245-33.hsd1.ut.comcast.net) |
| 15:20.25 | *** join/#ldstech josephscott (~josephsco@208.95.152.44) |
| 15:39.04 | kloplop321 | tdeforest: sudo apt-get install firefox |
| 15:39.26 | tdeforest | kloplop321: thanks |
| 15:39.59 | tdeforest | i assume that would install that latest version? |
| 15:41.00 | kloplop321 | It will install the latest version that is in the repository. Ubuntu's repositories are not on the nightly schedule. The new version doesn't get in there on day one either, they make sure its stable before updating it in the repository. |
| 15:41.48 | tdeforest | i need to test with version 6.0.2. is there a way to request that version be installed? |
| 15:45.17 | dbart | tdeforest: you can always just download the linux binary from mozilla.org |
| 15:45.20 | dbart | the latest version is 7.0.1, but 6.0.2 is available here: ftp://ftp.mozilla.org/pub/firefox/releases/6.0.2/linux-i686/en-US/ |
| 15:48.17 | tdeforest | dbart: thanks. i looked for different release on the firefox site but couldn't find any. i assume this is something i'll need to build once downloaded, right? |
| 15:51.31 | dbart | tdeforest: no, it's pre-compiled, just download then right-click on the file and choose "extract here", open the "firefox" folder and double click on the firefox file (you might be prompted to "open" or "run" the file, choose run) |
| 15:51.59 | tdeforest | oh nice |
| 15:53.11 | dbart | one thing to note, firefox will try to auto-update itself to the latest version (7.0.1), so make sure you don't do that (I think it prompts you to update) if you're wanting to specifically test version 6.0.2 |
| 15:56.12 | tdeforest | dbart: thanks |
| 15:58.18 | kloplop321 | tdeforest: there's one thing to note though: those binaries are not always compatible with the other plugins installed on the system, such as flash. |
| 15:58.28 | kloplop321 | They run perfectly though otherwise. |
| 15:59.43 | tdeforest | k. that should be fine. i am testing media queries |
| 16:44.13 | *** join/#ldstech jehoshua02 (~js@static-50-43-16-146.bvtn.or.frontiernet.net) |
| 17:51.39 | *** join/#ldstech josephscott (~josephsco@72.233.2.104) |
| 18:16.26 | *** join/#ldstech TimRiker (~TimRiker@bzflag/projectlead/TimRiker) |
| 18:16.26 | *** mode/#ldstech [+o TimRiker] by ChanServ |
| 18:33.07 | *** join/#ldstech jehoshua021 (~js@static-50-43-16-146.bvtn.or.frontiernet.net) |
| 18:47.35 | tdeforest | how is SORT? |
| 18:47.55 | tdeforest | wishes I was there :) |
| 19:07.48 | josephscott | ~give tdeforest a ticket to SORT |
| 19:07.49 | infobot | ACTION gives a ticket to SORT to tdeforest |
| 19:11.06 | *** join/#ldstech smootar (~smootar@63.226.93.98) |
| 19:11.06 | *** mode/#ldstech [+o smootar] by ChanServ |
| 19:15.04 | tdeforest | can you give me an airline ticket too :) |
| 19:30.48 | smootar | tdeforest, where do you want to go? (I just joined). |
| 19:33.34 | josephscott | he wanted to go to SORT :-) |
| 19:33.41 | smootar | :) |
| 19:38.27 | tdeforest | :) |
| 20:01.18 | *** join/#ldstech Donathius (~Dave_Andr@128.187.217.72) |
| 20:07.40 | *** join/#ldstech kloplop321 (~kloplop32@74.141.120.176) |
| 20:38.15 | *** part/#ldstech Donathius (~Dave_Andr@128.187.217.72) |
| 20:42.35 | *** join/#ldstech TimRiker (~TimRiker@bzflag/projectlead/TimRiker) |
| 20:42.35 | *** mode/#ldstech [+o TimRiker] by ChanServ |
| 20:49.42 | *** join/#ldstech jehoshua02 (~js@static-50-43-16-146.bvtn.or.frontiernet.net) |
| 21:41.12 | *** join/#ldstech Spennig (~Spennig@pool-173-67-183-189.hrbgpa.fios.verizon.net) |
| 22:39.50 | *** join/#ldstech Spennig (~Spennig@pool-173-67-183-189.hrbgpa.fios.verizon.net) |